Widely used Trivy scanner compromised in ongoing supply-chain attack
Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing supply chain attack
Cloud service providers ask EU regulator to reinstate VMware partner program
A trade association of cloud service providers (CSPs) filed an antitrust complaint today with the European Union’s European Commission (EC)
Federal cyber experts called Microsoft’s cloud a “pile of shit,” approved it anyway
In late 2024, the federal government’s cybersecurity evaluators rendered a troubling verdict on one of Microsoft’s biggest cloud computing offerings.
Researchers disclose vulnerabilities in IP KVMs from four manufacturers
Researchers are warning about the risks posed by a low-cost device that can give insiders and hackers unusually broad powers
Supply-chain attack using invisible code hits GitHub and other repositories
Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing
The who, what, and why of the attack that has shut down Stryker’s Windows network
Within hours of the US and Israel launching airstrikes on Iran two weeks ago, security professionals warned organizations around the
14,000 routers are infected by malware that’s highly resistant to takedowns
Researchers say they have uncovered a takedown-resistant botnet of 14,000 routers and other network devices—primarily made by Asus—that have been
Feds take notice of iOS vulnerabilities exploited under mysterious circumstances
The Cybersecurity and Infrastructure Security Agency has ordered federal agencies to patch three critical iOS vulnerabilities that were exploited over
Amazon appears to be down, with over 20,000 reported problems
Based on over 20,000 reports, Amazon appears to be experiencing an outage. According to Downdetector, reports of problems started increasing